File tree Expand file tree Collapse file tree 1 file changed +28
-1
lines changed Expand file tree Collapse file tree 1 file changed +28
-1
lines changed Original file line number Diff line number Diff line change @@ -250,7 +250,9 @@ Feature: Manage user custom fields
250
250
{UUID1} {UUID2}
251
251
"""
252
252
253
- @require-wp-5.6
253
+ # WordPress 6.8 uses BLAKE2b with wp_fast_hash() / wp_verify_fast_hash() for hashing application passwords.
254
+ # See https://make.wordpress.org/core/2025/02/17/wordpress-6-8-will-use-bcrypt-for-password-hashing/
255
+ @require-wp-5.6 @less-than-wp-6.8
254
256
Scenario : Get particular user application password hash
255
257
Given a WP install
256
258
@@ -274,3 +276,28 @@ Feature: Manage user custom fields
274
276
"""
275
277
true
276
278
"""
279
+
280
+ @require-wp-6.8
281
+ Scenario : Get particular user application password hash
282
+ Given a WP install
283
+
284
+ When I run `wp user create testuser testuser@example.com --porcelain`
285
+ Then STDOUT should be a number
286
+ And save STDOUT as {USER_ID}
287
+
288
+ When I try the previous command again
289
+ Then the return code should be 1
290
+
291
+ Given I run `wp user application-password create {USER_ID} someapp --porcelain`
292
+ And save STDOUT as {PASSWORD}
293
+ And I run `wp user application-password list {USER_ID} --name=someapp --field=uuid`
294
+ And save STDOUT as {UUID}
295
+
296
+ Given I run `wp user application-password get {USER_ID} {UUID} --field=password | sed 's/\$ /\\\$ /g' `
297
+ And save STDOUT as {HASH}
298
+
299
+ When I run `wp eval "var_export( wp_verify_fast_hash( '{PASSWORD}', '{HASH}', {USER_ID} ) );" `
300
+ Then STDOUT should contain:
301
+ """
302
+ true
303
+ """
You can’t perform that action at this time.
0 commit comments